Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/YkRywiq188OsfpDpeS3bC-oiN6g.roa
File: YkRywiq188OsfpDpeS3bC-oiN6g.roa (raw, json)
Hash identifier: 2lz1AkiK0ElbhiGnhmW87ktjlurzvXA6sbuxcZQC1yc=
Subject key identifier: 62:44:72:C2:2A:B5:F3:C3:AC:7E:90:E9:79:2D:DB:0B:EA:22:37:A8
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 358295B5
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/YkRywiq188OsfpDpeS3bC-oiN6g.roa
Signing time: Wed 19 Jan 2022 10:40:17 +0000
ROA not before: Wed 19 Jan 2022 10:40:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23764
IP address blocks: 5.10.136.112/29 maxlen: 29
95.130.192.0/24 maxlen: 24
95.130.194.0/24 maxlen: 24
5.154.128.0/24 maxlen: 24
5.154.129.0/24 maxlen: 24
5.10.141.8/30 maxlen: 30
5.10.141.136/30 maxlen: 30
5.154.144.0/24 maxlen: 24
5.154.145.0/24 maxlen: 24
5.154.146.0/24 maxlen: 24
5.154.147.0/24 maxlen: 24
5.154.158.0/24 maxlen: 24
5.154.159.0/24 maxlen: 24
5.154.154.0/24 maxlen: 24
5.154.155.0/24 maxlen: 24
5.154.156.0/24 maxlen: 24
5.154.157.0/24 maxlen: 24
145.14.80.0/24 maxlen: 24
145.14.83.0/24 maxlen: 24
145.14.85.0/24 maxlen: 24
145.14.87.0/24 maxlen: 24
145.14.89.0/24 maxlen: 24
145.14.91.0/24 maxlen: 24
145.14.93.0/24 maxlen: 24
79.139.0.0/24 maxlen: 24
79.139.1.0/24 maxlen: 24
79.139.2.0/24 maxlen: 24
79.139.3.0/24 maxlen: 24
79.139.4.0/24 maxlen: 24
79.139.6.0/24 maxlen: 24
79.139.7.0/24 maxlen: 24
79.139.8.0/24 maxlen: 24
79.139.9.0/24 maxlen: 24
79.139.10.0/24 maxlen: 24
79.139.11.0/24 maxlen: 24
79.139.5.0/24 maxlen: 24
79.139.13.0/24 maxlen: 24
79.139.14.0/24 maxlen: 24
79.139.12.0/24 maxlen: 24
5.10.136.208/30 maxlen: 30
145.14.66.0/24 maxlen: 24
145.14.68.0/24 maxlen: 24
145.14.70.0/24 maxlen: 24
145.14.73.0/24 maxlen: 24
145.14.76.0/24 maxlen: 24
145.14.77.0/24 maxlen: 24
145.14.78.0/24 maxlen: 24
2a04:f581:a00e:a004::/64 maxlen: 64
2a04:f581:a00f::/48 maxlen: 48
2a04:f581:a00e:a003::/64 maxlen: 64
2a04:f581:110b::/48 maxlen: 48
2a04:f580:9210::/48 maxlen: 48
2a04:f581:110a::/48 maxlen: 48
2a04:f580:9030:100::/56 maxlen: 56
2a04:f581:a00e:a002::/64 maxlen: 64
2a04:f581:a00e:a001::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897750453 (0x358295b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 19 10:40:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=624472c22ab5f3c3ac7e90e9792ddb0bea2237a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:ac:7d:1d:a4:12:04:3e:1b:a6:61:e4:7d:
a4:8f:ef:b8:c0:35:f1:0a:c0:58:e0:47:d5:3b:02:
b1:80:93:92:dd:13:c7:96:fe:5e:ae:58:b5:82:59:
ab:c4:54:1b:af:14:06:79:5b:2f:f9:7b:68:93:e3:
56:30:fe:fe:e5:7d:e6:ef:bb:db:45:36:6b:02:c8:
bf:06:94:b9:d3:dc:6d:36:ec:cf:bc:a3:e6:46:ff:
db:a2:41:17:19:10:95:fa:6e:78:e6:0e:71:92:1b:
41:4b:06:88:75:6c:6a:ce:12:af:86:4b:ed:3e:c0:
60:43:fa:94:7a:32:d8:9c:3b:60:bf:ce:a2:57:96:
74:ce:78:9a:1e:92:7f:79:5e:d1:5d:bb:fc:c5:95:
df:93:be:b3:f7:e7:a1:1f:26:86:8e:20:ad:1b:d8:
27:21:ed:f7:81:d7:e2:88:55:97:f2:61:20:a3:fa:
4f:4a:ef:82:89:b0:6d:5d:9c:78:66:cb:67:a5:e7:
7d:60:cd:d3:97:f1:d8:4f:e2:97:34:2b:9b:33:a2:
c7:16:72:4e:f6:be:08:31:1d:6f:ae:f2:74:34:cf:
26:9b:a9:01:71:38:cd:95:98:1c:f5:cf:34:38:72:
35:64:f7:7e:95:cb:67:44:7b:25:78:69:97:cb:e9:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:72:C2:2A:B5:F3:C3:AC:7E:90:E9:79:2D:DB:0B:EA:22:37:A8
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/YkRywiq188OsfpDpeS3bC-oiN6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.112/29
5.10.136.208/30
5.10.141.8/30
5.10.141.136/30
5.154.128.0/23
5.154.144.0/22
5.154.154.0-5.154.159.255
79.139.0.0-79.139.14.255
95.130.192.0/24
95.130.194.0/24
145.14.66.0/24
145.14.68.0/24
145.14.70.0/24
145.14.73.0/24
145.14.76.0-145.14.78.255
145.14.80.0/24
145.14.83.0/24
145.14.85.0/24
145.14.87.0/24
145.14.89.0/24
145.14.91.0/24
145.14.93.0/24
IPv6:
2a04:f580:9030:100::/56
2a04:f580:9210::/48
2a04:f581:110a::/47
2a04:f581:a00e:a001::-2a04:f581:a00e:a004:ffff:ffff:ffff:ffff
2a04:f581:a00f::/48
Signature Algorithm: sha256WithRSAEncryption
7b:dd:05:34:e1:2b:0c:cc:89:c4:e9:af:e2:54:8a:ec:a0:89:
81:f6:43:43:f2:4b:62:dd:a8:16:88:51:8b:ce:de:f8:d2:25:
5e:20:1e:52:04:70:5b:2a:20:d5:b4:a7:4d:1c:0b:af:63:f3:
b8:71:22:24:b8:a7:d1:7d:9c:52:3e:3e:b0:07:87:95:54:6a:
08:04:50:fd:61:16:b3:cc:8f:b5:42:2e:e2:c7:ec:60:29:cd:
37:e7:9c:5d:34:59:61:be:ec:3c:55:32:40:87:ab:06:be:f5:
9d:12:e0:95:46:5e:4a:b0:1b:6d:d0:43:71:de:0b:64:ca:ad:
6d:63:1a:46:20:67:f1:f9:7c:77:c4:ea:7d:0a:76:14:ea:57:
52:3a:ad:e6:92:42:4e:d6:eb:e0:8a:a4:36:77:cd:6a:ec:58:
58:d5:7c:d7:4c:9e:80:05:d2:c4:49:3c:72:31:b2:a7:2f:a4:
d1:5a:fb:c6:4e:8f:b4:5b:ba:00:a6:b8:30:01:b6:84:59:2b:
67:2c:8b:07:d3:aa:49:0c:9f:0c:39:1f:ad:4c:74:d6:c2:a9:
06:07:ee:60:7b:83:a9:43:7a:2c:19:c0:ed:89:63:a6:af:de:
41:3d:81:38:c1:29:4b:da:41:8a:a3:f6:33:70:e2:a8:7f:f9:
43:f5:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org